Re: sepgsql logging
| От | Dave Page |
|---|---|
| Тема | Re: sepgsql logging |
| Дата | |
| Msg-id | CA+OCxoxbCwOgu=6jDAO56vN=JJOzeQjbGCzEomHAgLvAo8JzJA@mail.gmail.com обсуждение исходный текст |
| Ответ на | Re: sepgsql logging (Tom Lane <tgl@sss.pgh.pa.us>) |
| Ответы |
Re: sepgsql logging
|
| Список | pgsql-hackers |
On Thu, Apr 1, 2021 at 3:23 PM Tom Lane <tgl@sss.pgh.pa.us> wrote:
Andrew Dunstan <andrew@dunslane.net> writes:
> On 4/1/21 8:32 AM, Dave Page wrote:
>> It seems to me that sepgsql should also log the denial, but flag that
>> permissive mode is on.
> +1 for doing what selinux does if possible.
+1. If selinux itself is doing that, it's hard to see a reason why
we should not; and I concur that the info is useful.
Thanks both. I'll take a look at the code and see if I can whip up a patch (it'll be a week or so as I'm taking some time off for Easter).
В списке pgsql-hackers по дате отправления: